Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230342e302f32342d3234203d3e203532333330.roa
File:                     3139302e3138342e3230342e302f32342d3234203d3e203532333330.roa (raw, json)
Hash identifier:          nMvO/ZUxkqMSPk1zUR9eAyoxPk5CbH659uJTML1ITmc=
Subject key identifier:   61:70:61:56:B9:ED:DD:6A:B7:62:E5:07:EA:64:9D:8A:B6:8F:23:53
Certificate issuer:       /CN=9EFB791A145582344954DF95067EBE4F7C567ECB
Certificate serial:       714C8BB279DC06BFB7ACA418E75A66BD0902B9A8
Authority key identifier: 9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230342e302f32342d3234203d3e203532333330.roa
Signing time:             Tue 04 Feb 2025 18:15:14 +0000
ROA not before:           Tue 04 Feb 2025 18:10:14 +0000
ROA not after:            Tue 03 Feb 2026 18:15:14 +0000
asID:                     52330
IP address blocks:        190.184.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4c:8b:b2:79:dc:06:bf:b7:ac:a4:18:e7:5a:66:bd:09:02:b9:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EFB791A145582344954DF95067EBE4F7C567ECB
        Validity
            Not Before: Feb  4 18:10:14 2025 GMT
            Not After : Feb  3 18:15:14 2026 GMT
        Subject: CN=61706156B9EDDD6AB762E507EA649D8AB68F2353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1e:a9:eb:1d:7c:f5:47:12:87:4e:3a:99:ef:
                    32:71:91:98:ce:d5:14:05:a3:6c:75:e9:ab:a8:42:
                    7d:fa:ce:29:21:52:c0:e9:12:31:7e:7a:db:4e:9d:
                    fd:f5:b2:92:65:03:e5:71:cf:d2:3a:a9:6f:4c:03:
                    41:c6:f2:da:1f:1a:38:aa:e9:ef:c5:7f:29:6c:03:
                    04:39:ed:f3:b6:9c:7a:76:31:82:fd:a8:b4:eb:ff:
                    e8:6e:25:8d:fc:56:c7:e1:56:13:73:0e:1e:dd:05:
                    99:30:93:c6:6a:c2:3d:9f:8f:84:ec:07:03:1e:b1:
                    42:63:a6:3a:4c:b4:0c:b7:73:18:67:7e:ea:96:6a:
                    04:c7:9e:d5:59:db:85:26:b9:ca:12:cf:c7:12:88:
                    3c:4b:75:c1:34:53:7a:d2:a7:9e:c0:0e:c1:de:b1:
                    cd:18:2f:bf:03:b7:30:56:4a:8c:2c:59:28:61:75:
                    5f:99:4c:e5:09:f3:e0:20:3e:4c:38:f4:e6:fe:f6:
                    7b:0e:58:2a:79:fc:c4:75:9d:4c:a9:b1:11:2f:79:
                    08:8f:d0:10:43:c1:54:5d:d1:6d:4d:35:14:a6:ee:
                    c5:d0:40:a0:f9:61:c7:58:80:88:f4:4c:c3:a2:ee:
                    55:8f:f5:03:ca:49:9f:24:b7:3a:9a:83:0b:f0:ae:
                    f4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:70:61:56:B9:ED:DD:6A:B7:62:E5:07:EA:64:9D:8A:B6:8F:23:53
            X509v3 Authority Key Identifier:
                keyid:9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230342e302f32342d3234203d3e203532333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:f9:11:54:4c:52:46:e7:9e:c6:e9:f4:e5:43:d1:30:1d:af:
         fc:61:a3:bb:18:6c:19:da:09:54:47:64:a5:e4:50:93:69:87:
         1b:05:8f:a1:65:93:1e:9e:7e:0c:62:65:a9:5c:ec:e3:53:72:
         41:ad:81:5d:35:e6:53:1b:ee:d8:63:e1:f2:2b:d3:2f:4d:2b:
         63:61:b8:7a:86:9a:8b:fb:7e:cf:43:f2:2c:b8:81:88:08:17:
         86:31:18:ea:ef:07:63:a4:95:e3:fd:fb:4f:6f:27:ee:14:55:
         b1:82:31:d6:6f:10:65:48:fb:a6:56:72:6e:de:c4:9e:91:ff:
         bd:f7:0e:85:7f:0a:07:6b:8b:81:67:3f:57:a0:2e:c6:8e:bc:
         6c:96:0c:8b:e7:ab:d3:1b:93:4e:90:83:b0:cc:e0:96:f6:46:
         14:19:a7:34:8f:b7:1d:ad:68:7c:eb:11:38:29:26:df:9c:cb:
         cd:e6:90:f7:ed:f5:1c:61:0f:fd:c3:01:75:8f:8d:b4:98:90:
         4e:94:88:9b:af:38:f1:a6:bb:83:d7:a2:27:f9:07:b0:fa:e9:
         ea:c5:e1:9c:ee:e8:65:f6:3e:fd:21:5e:96:03:50:01:d5:ec:
         48:7a:32:18:00:78:33:ad:a0:b0:9b:49:62:2d:f8:d9:c6:f8:
         fd:78:c3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 00:43:33 2025 by rpki-client